Bytebase
Use Hanzo IAM as the OAuth2/OIDC provider for Bytebase SSO.
Variables: IAM_HOSTNAME — Hanzo IAM server URL (e.g. http://localhost:8000). Bytebase_HOSTNAME — Bytebase server URL.
Step 1: Deploy Hanzo IAM and Bytebase
Deploy Hanzo IAM and Bytebase. Ensure both are running and you can sign in to Hanzo IAM. For production, see production mode.
Step 2: Configure Hanzo IAM application
- Create or open a Hanzo IAM application.
- Add redirect URL:
<IAM_HOSTNAME>/callback(e.g.http://localhost:8000/callback). Note Client ID and Client secret for Bytebase.

OIDC discovery: http://<IAM_HOSTNAME>/.well-known/openid-configuration
Step 3: Configure Bytebase
- In Bytebase open SSO and choose OAuth 2.0.
- Enter Hanzo IAM Client ID and Client secret. Set URLs:
- Token server URL:
http://<IAM_HOSTNAME>/oauth/token - Authorization server URL:
http://<IAM_HOSTNAME>/oauth/authorize - User Info server URL:
http://<IAM_HOSTNAME>/api/get-account - Scopes:
address phone openid profile offline_access email
- Token server URL:

Sign out of Bytebase and test SSO login.

How is this guide?
Last updated on